Approved changes feed: RSS · Atom

cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*

part: a version: 2.3.4 update: *

VendorFreetype (3ee64c55-8e70-5aed-bb46-2872b7a192c1)
ProductFreetype (e391fb37-5a9a-519e-808f-1334610140ce)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/freetype/freetype purl2cpe 2026-06-01 10:11:50.995039
pkg:gnu/freetype purl2cpe 2026-06-01 10:11:50.995040
pkg:rpm/fedora/freetype purl2cpe 2026-06-01 10:11:50.995042

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-2240 vulnerable 2026-06-08 05:05:28.020856 Details available
Stack-based buffer overflow in the cf2_hintmap_build function in cff/cf2hints.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of stem hints in a font file.
Published: 2014-03-12T14:00:00.000Z
Updated: 2024-08-06T10:05:59.888Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5670 vulnerable 2026-06-08 05:02:57.975136 Details available
The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) via vectors related to BDF fonts and an ENCODING field with a negative value.
Published: 2013-01-24T21:00:00.000Z
Updated: 2024-08-06T21:14:16.322Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5669 vulnerable 2026-06-08 05:02:57.973003 Details available
The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to BDF fonts and an incorrect calculation that triggers an out-of-bounds read.
Published: 2013-01-24T21:00:00.000Z
Updated: 2024-08-06T21:14:16.354Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5668 vulnerable 2026-06-08 05:02:57.957673 Details available
FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to BDF fonts and the improper handling of an "allocation error" in the bdf_free_font function.
Published: 2013-01-24T21:00:00.000Z
Updated: 2024-08-06T21:14:16.408Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1144 vulnerable 2026-06-08 05:00:47.689918 Details available
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via a crafted TrueType font.
Published: 2012-04-25T10:00:00.000Z
Updated: 2024-08-06T18:45:27.490Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1143 vulnerable 2026-06-08 05:00:47.688015 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1142 vulnerable 2026-06-08 05:00:47.685939 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1141 vulnerable 2026-06-08 05:00:47.683108 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1140 vulnerable 2026-06-08 05:00:47.681311 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1139 vulnerable 2026-06-08 05:00:47.679527 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1138 vulnerable 2026-06-08 05:00:47.677553 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1137 vulnerable 2026-06-08 05:00:47.675498 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1136 vulnerable 2026-06-08 05:00:47.673746 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1135 vulnerable 2026-06-08 05:00:47.671912 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1134 vulnerable 2026-06-08 05:00:47.669978 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1133 vulnerable 2026-06-08 05:00:47.668132 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1132 vulnerable 2026-06-08 05:00:47.666195 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1131 vulnerable 2026-06-08 05:00:47.664386 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1130 vulnerable 2026-06-08 05:00:47.662577 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1129 vulnerable 2026-06-08 05:00:47.660794 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1128 vulnerable 2026-06-08 05:00:47.658969 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1127 vulnerable 2026-06-08 05:00:47.657149 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1126 vulnerable 2026-06-08 05:00:47.636754 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0226 vulnerable 2026-06-08 04:56:36.099997 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3855 vulnerable 2026-06-08 04:55:17.611311 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3814 vulnerable 2026-06-08 04:55:17.128377 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3311 vulnerable 2026-06-08 04:55:14.106408 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3053 vulnerable 2026-06-08 04:55:12.384004 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1808 vulnerable 2026-06-08 04:50:21.987537 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1807 vulnerable 2026-06-08 04:50:21.980722 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1806 vulnerable 2026-06-08 04:50:21.978850 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.